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Abstract 

In this paper, we construct four binary linear codes closely connected with certain 
exponential sums over the finite field ¥ q and ¥ q — {0, 1}. Here q is a power of two. 
Then we obtain four recursive formulas for the power moments of Kloosterman sums 
in terms of the frequencies of weights in the codes. This is done via Pless power 
moment identity and by utilizing the explicit expressions of the exponential sums 
obtained earlier. 
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1 Introduction and Notations 



Let i/j be a nontrivial additive character of the finite field ¥ g with q = p r 
elements (p a prime). Then the Kloosterman sum K(ifj; a) is defined as 



K(ip; a) = J2 V>0 + G F*) 



1 



The Kloosterman sum was introduced in 1926 to give an estimate for the 
Fourier coefficients of modular forms. It has also been studied to solve various 
problems in coding theory and cryptography over finite fields of characteristic 
two. 
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For each nonnegative integer h, by MK(ifj) h we will denote the h-th moment 
of the Kloosterman sum K(ip; a). Namely, it is given by 



MK(i)) h = K(ifj;a 



h 

oGF* 
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If -0 = A is the canonical additive character of ¥ q , then MK(X) h will be simply 
denoted by MK h . 

From now on, let us assume that q = 2 r . Carlitz pQ evaluated MK h , for 
h < 4. Recently, Moisio was able to find explicit expressions of MK h , for the 
other values of h with h < 10 (cf.[B]). This was done, via Pless power moment 
identity, by connecting moments of Kloosterman sums and the frequencies of 
weights in the binary Zetterberg code of length q + 1, which were known by 
the work of Schoof and Vlugt in [7j. 

In this paper, we will produce four recursive formulas generating power mo- 
ments of Kloosterman sums. To do that, we construct four binary linear codes 
closely connected with certain exponential sums(cf. Theorem 2). It is amusing 
that those exponential sums have been used repeatedly in our derivation of 
recursive formulas generating power moments of Kloosterman sums (cf. [3], 
14J). 

Theorem 1 of the following(cf. (1), (2), (4)-(9)) is the main result of this paper. 
Henceforth, we agree that the binomial coefficient m = 0, if a > b or a < 0. 

Theorem 1 Let q = 2 r . Then we have the following. 
(a)For r > 3, and h = 1, 2, . . . , 



MK h = k ^2(-l) h+l+1 (f\ (q - i) h ~ l MK l 

min{q-2, ti] h / _ o _ ,A 

+ a H (-V h+j c hj E t\s(h, t)2 h -< r_ 2 _ 3 t 



3=0 t=j 

where {Cij^Zq is the weight distribution of the binary linear code C\ given 
by 

Cy = E II (?)u = o,...,q-2). (2) 

tr(/3-i)=0 \ U PJ 

Here the sum is over all the sets of nonnegative integers {up} tr m-i^ =0 satisfying 
E p /3 — J an d E vpfi = 0- addition, S(h, t) is the Stirling number 

of the second kind defined by 

s(Kt) = ±j:yiy-iQj h . (3) 
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(b) Forr >3, and h = 1,2, ... , 

MK h =E(-l) ft+ ' +1 (f) (q-l) h - l MK l 

1=0 V V 

rran{§-l, ft} ft 



mm{§-l, ft} ft /2 _ 1 _ „-\ ^ 

,2fc-t I 2 1 J ) 



2_i 

where {C 2 j}J =0 is t/ie weight distribution of the binary linear code C 2 , and 



q 

C 2 j(0 < j 1 < - — 1) is egna/ to i/ie number of all the sets of nonnegative integers 
{vp}tr(p-i)=o satisfying i/ p = or 1, ^ ^ = i H f/j/? = 0. 



(5) 



fcj For /i = 1,2, 



h_1 //A 



i=o Vv 

min{g, ft / .v 

i/i-t / H J 



+ g £ (-l)^ 3j Ei!%i)2' 

j'=o *=j 



(6) 



where {C3j}j =0 is £/ie weight distribution of the binary linear code C3 given 
fry 

^■=e n ( ;/ 2 )(j=o,...,4). (7) 

ii/ere the sum is over all the sets of nonnegative integers {vp}t r (p- l )=i satisfying 
v p — j and u pP = °- 

tr(/?- 1 )=l tr(/3- 1 )=l 

fc?; For /i = 1,2, ... , 



MK h = - Y (f) (q + l) h ~ l MK 
1=0 Vv 

min{^, h} ft 

+ g £ (-iyC 4j E^(M)2 



mm{§ , h} ft /? _ ~ A 

2/i-t/ 2 J 

3=0 t=j \2~ t ^ 



(8) 



£ 

where {C 4 j}| =0 is £/ie weight distribution of the binary linear code C4, and 



C4,j(0 < j < — ) ^ egna/ to £/ie number of all the sets of nonnegative integers 
{vp}tr(p-i)=i satisfying vp = or 1, ^ ^ = j arid ^ vpP = 0. 

ir(/3- 1 )=l tr(/3- 1 )=l 

(9) 
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Before we proceed further, we will fix the notations that will be used through- 
out this paper: 

q = 2 r (re Z> ), 

F q = the finite field with q elements, 

tr(x) = x + x 2 + • • • + x T 1 the trace function ¥ q — > F 2 , 

X(x) = (— l)* r ( a; ) the canonical additive character of F ? . 

2 Two exponential sums 



Let F2 , F+ denote the additive groups of the fields ¥ 2 ,¥ q , respectively. Then, 
with Q(x) = x 2 + x denoting the Artin-Schreier operator in characteristic two, 
we have the following exact sequence of groups: 

0^F+ ^F+ ^6(F,) ->0. 

Here the first map is the inclusion and the second is given by x i— > Q(x) = 
x 2 + x. So 

e(F 9 ) = {a 2 + a I a G ¥ q }, and [F+ : 0(F,)] = 2. (10) 



The next theorem is the key to the results of this paper. 

Theorem 2 ([2]) Let A be the canonical additive character of ¥ q , and let 
a G F*. Then 



E \{-£ r ) = K(\ ] a)-l, 



aGF„-{0,l} ' 

(6) V" A( — -) = — iT(A; a) — 1, if x 2 + x + b(b G F„) irreducible over ¥ q , 

a& a' + a + b 



or 



equivalently if be¥ q \ 9(F 9 )(c/.(10)). 



3 Construction of codes 

Here we will construct four binary linear codes C\ of length N\ = q — 2(q > 4), 
C 2 of length N 2 = § - l(q > 4), C 3 of length N 3 = q, and C 4 of length JV 4 = §, 
which are closely connected with the exponential sums (a), (b) in Theorem 2. 
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Let b G F g \ 0(F 9 ) be fixed, and let 70 = 0, 71, ... , 7|-i be a fixed ordering of 
the elements in 0(F 9 ) = {a 2 + a \ a G F g }. Then 

0(F,) = {70, 71, • • • , 7f-i} = {(3 e¥ q \ trp = 0}, 
6 + e(F 9 ) = {6 + 70j 6 + 7i,...,6 + 7 S _ 1 } = { / 9eF g |*r / g = l}, 
¥ g = {7o, 7i, • • • , 7§-i, & + 7o, & + 7ii • • • > b + 7§-i}- 
Also, we put 



vi = (--,... , , ) G Ff , (11) 



7i 72 7f-i 7i 72 7f-i 
1 1 1 

_ \ <- w 

■ q ' 



V2 = (-,-,...,-—) GB?, (12) 



71 72 7f-i 



W3 = (^'^'---'aT^'^'^'---'aT^) gF ^ 3 ' ( 13 ) 
+ 70 + 71 6 + 7|_i + 70 + 71 6 + 7|_i 

^4 = k^— , , • • • , 7-77^) e F f 4 - ( 14 ) 

Remark 3 For eac/i z = 1,2,3,4, and each (3 G F q , let rii((3) denote the 
number of components with those equal to f3 in the vector Vi. Then it is obvious 
that 

, ' 2, if P eF*, with tr(p- 1 ) = 0, 

m(j3) = <; (15) 

0, otherwise, 

, 1, if 3 G F* with trip- 1 ) = 0, 
n 2 {3) = { q ' ^ J (16) 

0, otherwise, 

, 2, «/ trip- 1 ) = 1, 
nM = { U > (17) 

0, otherwise, 

, 1, if trip- 1 ) = 1, 
n 4 (P) = { ^ ) (18) 

0, otherwise. 

Then, for each i = 1, 2, 3, 4, the binary linear code Ci is defined as 

Q = {iiGFf' \u-Vi = 0}, (19) 
where the dot denotes the usual inner product in F^* . 
The following Delsarte's theorem is well-known. 
Theorem 4 ([5]) Let B be a linear code overF q . Then 

(B\ ¥2 )^ = tr(B^). 
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In view of this theorem, the duals C^~(i = 1, 2, 3, 4) are given by 

, a a a a a a 
C 1 = {ci(a) = (tr — , tr — , . . . , tr , tr — , tr — , . . . , tr ) | a G F„|. 

7i 72 7f-i 7i 72 7f-i 

(20) 

C2 = {c 2 (a) = (tr—, tr—, tr—) \ a G ¥ g }, (21) 
7i 72 7§-i 

C3 = {c 3 (a) = (^ r T~~ — > ■ ■ ■ , tr—^ , tr— —, . . . , tr— — ) | a G ¥ q }, 



b + 70 b + 7£_! b + 70 6 + 7. 



-1 



(22) 

= {04(a) = (tr-r^—, tr-^—, tr—^ ) | a G ¥ q }. (23) 

b + 70 + 71 + 7|_! 



(a) and (b) can be respectively proved just as Theorem 11 in [3] and Theorem 
13 in % 

Theorem 5 (a) For q = 2 r , with r > 3, the map ¥ q — > C^~(a > Ci(a)), for 
i = 1,2, is an ¥ 2 -linear isomorphism. 

(b) For every q = 2 r , the map ¥ q — > C^~(a \—> ci(a)), for i = 3,4, is an 
¥ 2 -linear isomorphism. 

Remark 6 Note that, for i = 1,2, and q = 4, the kernel of the map F4 — > 
C^(a 1— > Ci(a)) is F 2 . 



4 Power moments of Kloosterman sums 



In this section, we will be able to find, via Pless power moment identity, a 
recursive formula for the power moments of Kloosterman sums in terms of the 
frequencies of weights in C*, for each i = 1,2,3,4. 

Theorem 7 (Pless power moment identity) Let B be an q-ary [n, k] code, 
and let Bi (resp. B^ ) denote the number of codewords of weight i in B(resp. 
in B^). Then, for h = 0, 1, 2, . . . , 

n min{n,h} h / _ -\ 

EM= E (-l) j B^t\S(h,t)q k -\ q -l)^rjX (24) 

3=0 j=0 t=j \ n l ) 

where S(h,t) is the Stirling number of the second kind defined in (4)- 
Lemma 8 For i = 1,2,3,4, and a G F* the Hamming weight w(ci(a)) (cf. 
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(20)-(23)) can be expressed as follows: 

(a) w( Cl (a)) = ±(q-l - K(\;a)), (25) 

(6) w(c 2 (a)) = ±(q-l-K(\;a)), (26) 

(c) w(c 3 (a)) = ^(q + l + K(\;a)), (27) 

(rf)«;(c 4 (a)) = i(g + l + ir(A;a)). (28) 



Proof. We will just show (c) and (d), as (a) and (b) can be proved in a similar 
manner. 

w(c 3 (a)) = \ • 2 ■ £ (1 - (-if ( *V)(c/.(22)) 

A 3=0 

= 5<9 - (~ A '< A ; «) - l))-(by Theorem 2 (b)) 
Further, we see that w (04(a)) = ^w(c 3 (a)). □ 



Denote for the moment Vi in (11)-(14) by t>j = (gi,g 2 , . . . , gjvj, for i = 1,2, 3, 4. 
Fix i(i = 1,2,3,4), and let u = (ui, . . . , u^) £ with up l's in the coor- 
dinate places where = (3, for each /? e F g . Then we see from the definition 
of the code Cj(cf. (19)) that n is a codeword with weight j if and only if 
^2 P P = 3 an< ^ ^2 = 0( an identity in ¥ q ). As there are Il/3eF 9 ("t^)( c ^ 

Remark 3) many such codewords with weight j, we obtain the following result. 

Proposition 9 Let {Cjj}j=L ^ e ^ e weight distribution of Cj, /or eac/i z = 
1,2,3,4, where Cij denotes the frequency of the codewords with weight j in 
d. Then 

cu-EH^I <») 

f3ew q \ V P J 

where the sum runs over all the sets of integers {vp}pew q (0 < up < rii(/3)), 
satisfying 

V P = h and v pP = °- ( 30 ) 
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Corollary 10 Let {Cij}jl Q be the weight distribution ofCi, fori = 1, 3. Then 
we have Cij = C^-j, for all j, with < j < iVj. 

Proof. Under the replacements i/g — > rij(/3) — i/g, for each /? G F g , the first 
equation in (30) is changed to iV, — j, while the second one in (30) and the 
summands in (29) are left unchanged. Here the second sum in (30) is left 
unchanged, since ^ rii(/3)f3 = 0, for i — 1,3 (cf. (15), (17)). □ 

Now, we get the formulas in (2), (5), (7), and (9), by applying the formula in 
(29) to each Q, using the values of n;(/3) in (15)-(18). 

From now on, we will assume that r > 3, for % — 1,2, and hence, for i = 
1,2,3,4, every codeword in can be written as q(a), for a unique a G F 9 
(cf. Theorem 5). Then we apply the Pless power moment identity in (24) to 
each C^, for i — 1,2, 3, 4, in order to obtain the results in Theorem l(cf. (1), 
(2), (4)-(9)) about recursive formulas. Then the left hand side of that identity 
in (24) is equal to 

(31) 

aeF* 

with the w(ci(a)) in each case given by (25)-(28). 
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